Тёмный

CP2112 and DJI Battery Killer Rewrite BQ8030 ROM" Laptop battery data retrieval - BMS HACK 

Anandakrishna Sudhakaran
Подписаться 5 тыс.
Просмотров 11 тыс.
50% 1

Copyright Disclaimer:
The content presented in this video may include information, diagrams, or methods obtained from publicly available sources, forums, or platforms in the field of electronics. While efforts have been made to ensure compliance with copyright and fair use, if any copyright owner believes that their work has been used without proper permission, please contact us, and we will address the matter promptly.
Educational Purpose Statement:
This video is intended for educational purposes, providing insights into electronic components, circuits, or related topics. The goal is to share knowledge, assist learners, and contribute to the understanding of electronics. Any demonstrations or discussions are conducted with the utmost respect for ethical and lawful practices. If you have any questions or concerns, feel free to reach out. _____________________________________________________________________
Your support means the world to me! If you appreciate the content I create and would like to contribute to the growth of my channel, you can show your support through donations.
❤️GPAY : asudhakaran715@okaxis
paypal.me/iamaksv
_____________________________________________________________________
Links
Cp2112 USBHOST : www.silabs.com...
DJIBATTERYKILLER: drive.google.c...
DJI killer Telegram Channel ( Not mine ) : t.me/+goUDc8gY...
HEX EDITOR : mh-nexus.de/en...
HEX CALCULATOR : www.calculator...
HEX CONVERTER : www.rapidtable...
:yt:Hack with FX2LP board
:yt:Part 1 : • Laptop battery data re...
:yt:Part 2 : • Laptop battery data re...
:yt:Part 3 : • Laptop battery data re...
"Game-Changing Discovery: Read and Write BQ8030 ROM using CP2112 and DJI Battery Killer!"
"Hey there, I'm thrilled to share an incredible breakthrough in battery hacking that I recently discovered. In this video, I reveal a groundbreaking method I found to read and write the BQ8030 ROM using the CP2112 USB-to-i2c bridge device, together with my innovative creation, the DJI Battery Killer.
Join me on this exhilarating journey as I unlock new frontiers in battery management. With the power of the CP2112 USB-to-i2c bridge and my very own DJI Battery Killer, I've cracked the code, gaining unprecedented access to the BQ8030 ROM.
In this tutorial, I'll guide you through the step-by-step process of this game-changing discovery. We'll explore the necessary hardware and software setup, witnessing how the CP2112 USB-to-i2c bridge establishes a secure connection between the DJI Battery Killer and the BQ8030. Together, we'll witness the magic as we read the existing ROM data and write new data back into the BQ8030, taking control of its firmware like never before.
The CP2112 USB-to-i2c bridge is an incredible device that provides seamless communication between USB and SPI devices, offering versatility and efficiency. Combined with the DJI Battery Killer, my groundbreaking creation, we're able to unlock new possibilities for customizing battery management parameters, optimizing performance, and reshaping the future of battery technology.
Whether you're an intrepid electronics enthusiast, a passionate hardware hacker, or an industry professional seeking to push the boundaries, this video is a must-watch. Join me as we celebrate this game-changing discovery and embrace the limitless potential it holds.
Make sure to subscribe to my channel, as I'll be sharing more exciting advancements in battery hacking, insights on the CP2112 USB-to-i2c bridge, and future innovations with the DJI Battery Killer. Together, let's revolutionize battery technology as we dive into the world of reading and writing the BQ8030 ROM using CP2112 and the DJI Battery Killer!"

Опубликовано:

 

11 сен 2024

Поделиться:

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист
Посмотреть позже
Комментарии : 104   
@anirudhkundu3567
@anirudhkundu3567 Год назад
I really appreciate your dedication!!
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran Год назад
Thank you brother ❤️ , Iam not worried about views am always worried about my quality of content. One like and one comment means a lot to me ❤️❤️❤️
@anirudhkundu3567
@anirudhkundu3567 Год назад
@@AnandakrishnaSudhakaran i am sure that you aren't worried about views. ❤️❤️
@owaisnajam5304
@owaisnajam5304 Год назад
Good job, Anand. Keep it up. I will try to follow your tutorials to reset my Dell laptop battery. And thanks for sharing your software.
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran Год назад
Software is not mine, all credits to a man I don't know. Thanks for your support. Before connecting make sure the positive line is not in touch with data or clock line. Careful. Any doubt feel free to ask
@owaisnajam5304
@owaisnajam5304 Год назад
@@AnandakrishnaSudhakaran Can you share this software via Google drive without any login password? First question, in your opinion which method is easy, using fx2 board or cp2112 board? Actually I have both boards but I burnt cp2112 ic by applying 12 volts to it then I replaced the ic but I am not sure that it is working good or not. Second question, can I contact you by email if need any help in this subject? Thanks.
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran Год назад
@@owaisnajam5304 you can contact me through insta or telegram or mail, did you open your battery back? Which ic is there?
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran Год назад
I can share the link personally to you , no prblm
@owaisnajam5304
@owaisnajam5304 Год назад
@@AnandakrishnaSudhakaran I didn't open yet. I will drop a message here when I will do.
@Majorkalter
@Majorkalter Год назад
Very happy with your video. You make the right content. Good luck in your work and promotion of the channel on RU-vid
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran Год назад
Thank you for your support ❤️❤️
@hitmanyt2021
@hitmanyt2021 Год назад
well done bro well done please do make a video on r2j240 chip with this cp2112
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran Год назад
I have 51f51, but I don't know the unlock key, I tried many ways to read the rom. I even tried with the boot pin and reset pin. I am waiting for more batteries to test. Cant release a video without knowing. Thanks for your support bro ❤️❤️
@dekopac311japan2
@dekopac311japan2 5 месяцев назад
great vid! how do you think possibility of hacking for BQ devices other than bq8030?
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran 5 месяцев назад
There is no hacking, am just doing everything from internet, if its safe way i will create video. I tried many chips. But keys are different. And no idea how to get them. Still searching.. thank you for your comment
@dekopac311japan2
@dekopac311japan2 5 месяцев назад
@@AnandakrishnaSudhakaranthanks reply. keep your great work.
@ElectruinoDiy
@ElectruinoDiy 5 месяцев назад
how to know which Chip is installed in battery without open battery case
@davidbolha
@davidbolha 4 месяца назад
Sadly you can't. Opening it is a must. 🙄😶
@user-sh2vu6xg4x
@user-sh2vu6xg4x 10 месяцев назад
thank you very much with appreciation
@user-sh2vu6xg4x
@user-sh2vu6xg4x 10 месяцев назад
Good morning my friend you could make a video for this 2F8K3 battery for dell Alienware 17r1 for the battery model if the machine can activate it and pass the driver on the cip I would greatly appreciate it to make a video for that battery and Show us the connection to the terminals thanks very much with appreciation ...!!???
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran 10 месяцев назад
I dont have that battery, let me check on google, I will make you a video for you, Thanks for your support,
@job8701
@job8701 Год назад
Hello. I have similar Lenovo battery with 2+5 pin socket (PN:42T4619 nominal: 10,8V 7.8AH 86WH seems to be older type than yours) . Question is if it is possible to detect the chip type without opening the battery case. Other question: For resetting You used also the Arduino Uno in other video, which method is more effective? At 1:32 it is seen with DJIkiller the cp2112 can handle only 3 chips. Thanks for your video .
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran Год назад
Cp2112 can handle chips based on the software. Dji support only 3 chips but Be2Works softwarw support many chip on their paid version. Dji can effective on any kind of chip. Arduino is simple, if we have the correct software we can do anything with that. Answer to your question, still only one software can identify chip without opening is TestBattery v5.50 from UBRT REGEDIT GROUP. But you need ev2300 or lpt to i2c for this software . If your mother oard support LPT port you can design lpt to i2c easily i can give you the circuit diagaram. Last day i tried to read one battery from lenovo as bq8030, but not worked. Then i tried woth testbattery and detected as 51f51. Strange for me. So I opend and checked. It was 51f51. So for identity chip for free , use testbattery 5.5 Do you have ev2300 or ev2400, then bqstudio is available for free. Please tell me about your hardware side
@job8701
@job8701 Год назад
Hello. I don't have any special hardware, I only think of replacing the cells inside the battery ( more environment friendly solution, as compared to thrashing the entire used battery). I searched the solution and found that the cheapest way would be using cp2112 or Arduino (like you did), perhaps RasberryPI. (EV2300 is a big investment and is not worth buying). But I had to realize that these DIY solutions are limited because there are lot of type of BMS chips most of them do not have any datasheet published. So i have to open the housing of the battery, and if I have luck there will be known BQxxx series chip. I incline rather to purchase an Arduino, because it can be used for other purposes as well, however using Arduino for BMS restore is not so effective compared to cp2112. Thanks for your reply.@@AnandakrishnaSudhakaran
@seven1productions819
@seven1productions819 3 месяца назад
Nice vid where do you get the wires from?
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran 3 месяца назад
Its a normal jumper wires used for arduino board, and those golden pins from old laptop motherboard. Just soldered. Thanks for your comment
@seven1productions819
@seven1productions819 3 месяца назад
@@AnandakrishnaSudhakaran okay thanks
@johnbaxter1730
@johnbaxter1730 Год назад
Very interesting but this version of DJIBatteryKiller is not available via the link provided. Can you provide another link from another server or source please.
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran Год назад
thanks for the comment , here is the link drive.google.com/file/d/13xGIZVaDspGy3EgNBYlFE6cRadzuvqKg/view?usp=sharing
@johnbaxter1730
@johnbaxter1730 Год назад
Great fast response but it still wont run on my win10 machines here in the uk. I tried as administrator but still no good. The downloads are fine so no problem there and this is a newer version which suggests this is the one I need but it wont run i just get an error message. It is very frustrating.@@AnandakrishnaSudhakaran
@johnbaxter1730
@johnbaxter1730 Год назад
I should add that the download includes the old version which runs perfectly.
@johnbaxter1730
@johnbaxter1730 Год назад
Oh and I copied all the .dll files across to the new version folder as these are required I believe.
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran Год назад
@@johnbaxter1730 is it working? I think it's the latest version.
@wishtone885
@wishtone885 9 месяцев назад
I really appreciate your works sir, and how about dji battery reset cycle?
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran 9 месяцев назад
which battery, give me full details
@wishtone885
@wishtone885 9 месяцев назад
@@AnandakrishnaSudhakaran and can i join to your telegram group?
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran 9 месяцев назад
@@wishtone885 dji battery killer group is not mine, but you can contact me through telegram
@wishtone885
@wishtone885 9 месяцев назад
@@AnandakrishnaSudhakaran what is your link in telegram? Thanyou :)
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran 9 месяцев назад
@@wishtone885 my id ialwaysthere4u
@roolon6604
@roolon6604 9 месяцев назад
@Anandakrishna Sudhakaran Thank you very much for sharing your knowledge. I have to reset to default settings 3s2p Lenovo battery FRU 42T4861. Can you share Be2works demo file? Can you also help me/leave some advice for reseting the battery. There are bq8030A and bq29330 inside. BTW CP2112 is not USB-to-SPI (as you decribe in decription) but USB-to-I2C chip. Regards
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran 9 месяцев назад
Oh thanks for correcting me, i will correct it. Do it carefully Do not touch the positive line of the battery or pcb with sda and scl pin. Bq8030 is easy to crack. Check your fuse also. If you plan to replace cells, change with same cell model. And am noob at this, so i cannot tell you any advice. Just do it on your style. Always follow safety procedures. Multiple check sda and scl not touch to positive. Also check the voltage on sda and scl before connecting to cp2112. Cp2112 can work upto 5.6volt range. Also share image or video if you plan to record it so i can share it on my youtube.
@roolon6604
@roolon6604 9 месяцев назад
@@AnandakrishnaSudhakaranThankyou My battery worked fine (70% of new one),. I recognized one pair of cells had a little bit lower voltage. I swaped the with another one that was much worse (should have been a new ones). After one cycle the capacity written in Bq was decreased from 45Wh to 5Wh (full capacity). I changed again those two cells (pararell connected) into true new one , oryginal 2500mAh as oryginal but not Sanyo (as was) but Samsung 25R. Now the battery is correct charged to 4,20V per cell (balanced, every cell same voltage), but the supply is cut when the voltage fall to 3,85V (not 3,3). After reaching 5%, during discharging, the rest lasts very long time (shows 1 minute (7%) left, and it lasts 60 minutes (YT) to shut down). I try full cycles: charge to 100% and discharde to shooting down and then the rest in bios. Do you thing the Bq chip is recalculating capacity and could increased it to real value or never increases and could only decrease - one way? // SCL and SDA lines are ussualy pulled up with 4K-10K restistor, and it works shorcuting the line to GND. So connecting directly to VCC could demage the chip indeed. Regards!
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran 9 месяцев назад
@@roolon6604 do a calibration cycle again, one full charge, full discharge , again full charge, based on the battery performance bq will adjust the settings and it will give correct readings. What is the design voltage of the battery? Let me calculate it for you.
@roolon6604
@roolon6604 9 месяцев назад
@@AnandakrishnaSudhakaran Next cycle (after long (1h) 1% to turn off discharging starts from 11.5V and first 1% is lasting long now. Parameters read from Lenovo X220 Power manager/battery. Condition: Fair (yelow) before was GOOD(geen), Designed capacity: 62.16Wh, designed voltage 11.10V, cycle count 328, full charge capacity 3.53Wh (yes, no decimal point mistake). Original cells SANYO UR18650ZT 2700mA, 2 of them (the lowest votlage) I replaced with new oryginal Samsung INR18650-25R 2500mAh.// Btw I wondering that most of people replacing the same pair of cells - with NTC resistor on them. Connected (+) to the highest voltage of set (last one) counting from global GND.
@roolon6604
@roolon6604 9 месяцев назад
@@AnandakrishnaSudhakaran I did 4 times full cycles and also did battery maitenance (button in Lenovo power manager). Full charge to 12.90V, discharge and charge again with recalibration. But it works probbablly only one way - decreasing full charge capacity and balancing cells. After that I have no changes noticed.
@pirate8847
@pirate8847 8 месяцев назад
Hello. what values should be entered to unlock the bq40z696a chip in lenovo batteries?
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran 8 месяцев назад
It uses sha 1 authentication method, codes will not work. And I have this chip. But default codes not work. Default codes are 0414 3276 1234 5678 0000 0000 FFFF FFFF lot of other keys are also available. If I got anything I will let you know
@pirate8847
@pirate8847 8 месяцев назад
@@AnandakrishnaSudhakaran thank you. what do the values 71.73.70 mean? where can i find out what numbers should i enter?
@alirahimi7075
@alirahimi7075 14 дней назад
Hi thank you for your method can i that process for bq20695 chip ?
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran 12 дней назад
verify chip parameters of bq20695, mostly everything looks same, but authentication will be different. so do it careful, it can damage your chip
@abdelillah90
@abdelillah90 Год назад
send 0x0517 to 0x70 :gave the error could not write word ? what to do ?
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran Год назад
After sending 0214, what is the value from 0x73? Did you subtract that hex from 10000?
@zaord
@zaord 5 месяцев назад
Does this works also on Ronin M batteries ??
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran 5 месяцев назад
DEPENDS ON THE CHIP, SECURITY WILL BE DEIFFERENT,
@hardeyajuluchukwu1011
@hardeyajuluchukwu1011 10 месяцев назад
Hi how can I get more info about laptop battery repair and can I get this device and software from you
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran 10 месяцев назад
Please tell me about your laptop. Software is free. Am not the developer. And cp2112 is a debug hardware. What is your purpose?
@hardeyajuluchukwu1011
@hardeyajuluchukwu1011 9 месяцев назад
My main porpose is to no how to use the software to b repairing batteries
@airfilm_it
@airfilm_it 9 месяцев назад
will it works with TB50 batteries too?
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran 9 месяцев назад
I cant tell you now, but i will try to get the details. Do you know which chip is used in that battery?
@airfilm_it
@airfilm_it 9 месяцев назад
@@AnandakrishnaSudhakaran it's wrote FR5870
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran 9 месяцев назад
@@airfilm_it ok any other chips, FR5870 is MSP430FR5870. You can get the datasheet here www.google.com/url?sa=t&source=web&rct=j&opi=89978449&url=www.ti.com/lit/gpn/MSP430FR5870&ved=2ahUKEwii7sDK0NWCAxV8zjgGHYV8BLIQFnoECA8QAQ&usg=AOvVaw22V7gdMpVTn_8F4pvQMmnf
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran 9 месяцев назад
@@airfilm_it any other chips?? Which connected to the all cells,
@bartfranck7249
@bartfranck7249 11 месяцев назад
djibatterykiller software link is not working
@electronicsengineeringandr2408
Can you reset bq40320 with PF bit with cp2112
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran Год назад
50% chance only, you can connect and communicate with the chip with cp2112. Or any other smbus support board. If the chip is using default Unseal and Full access key you can do the unsealing process. If it unsealing worked then you can clear any pf flags by using pf clearing commands given in technical reference of bq40320. This dji battery killer is designed for dji battery. But we can do anything with another chip if we have some knowledge about the procedure of battery unlock. So if you have cp2112 you can try, or if you have arduino, there are free softwares and codes avilable and you can try yourself.
@hitmanyt2021
@hitmanyt2021 Год назад
can you give me link for r2j240 flasher file and also a2168 and for SH chines chip?
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran Год назад
Sure, check this thread, you can find 3 softwares for cp2112. Please test it yourself and make a video. github.com/lmdpua I dont have a2168, also r2j240 flasher is not available
@hardeyajuluchukwu1011
@hardeyajuluchukwu1011 9 месяцев назад
My porpose is to no how to use it to unlock laptop battery s
@saifi1223
@saifi1223 Год назад
Thanks bro can i use ch340 ? And what shoul i select 3.3 or 5 volts ?
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran Год назад
Ch340 can't connect. do you have any arduino board?
@saifi1223
@saifi1223 Год назад
@@AnandakrishnaSudhakaran yes i have uno and nano
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran Год назад
@@saifi1223 ok what you want actually?
@saifi1223
@saifi1223 Год назад
​@@AnandakrishnaSudhakarani want to reset bms i have changed batteries and its not working
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran Год назад
@@saifi1223 which board? Do you hav instagram or telegram?
@antaninianta
@antaninianta Год назад
Please, if you can make a video on how to reset M37512
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran Год назад
am sorry i dont have that chip. If i get anything i will reply you. thank you
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran Год назад
Try using the karosium guide , there are precompiled files for windows but you need fx2lp board for the connection. If you need the link i can provide
@antaninianta
@antaninianta Год назад
@@AnandakrishnaSudhakaran It'd be very appreciated, thanks
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran Год назад
@@antaninianta try this method, read full carefully www.karosium.com/2016/08/adding-m37512-with-panasonicibm-firmware.html?m=1
@antaninianta
@antaninianta Год назад
@@AnandakrishnaSudhakaran I just bought the fx2lp board, need to wait until it arrives. I'm using Linux and already built the smbusb software. I need to understand how to use the board, how to connect it to the bms connector of the battery ( I think). I will watch your videos about BQ8030 where you use this board and hope to learn and somehow adapt it to my case (btw, it's a Thinkpad T61 battery, with Panasonic cells, hence the microcontroller firmware is M37512 FC200). Then I will need to actually interact with the microcontroller to read/write/reset data on it (its eeprom?) and replace the blown fuse (but the cells are good now, there was just one at 2.2v that I revived slow charging it with bench power supply). It will be very challenging since I'm a total noob in this. Thanks for now.
@omelectronicsom3115
@omelectronicsom3115 Месяц назад
Please make your videos in Hindi language.
@demirpp
@demirpp 10 месяцев назад
Work in BQ40z50?
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran 10 месяцев назад
If the unseal and full access key is default , yes you can reset the bq40z50
@MAnees-jk5yg
@MAnees-jk5yg 9 месяцев назад
@@AnandakrishnaSudhakaran bro how to know which chip my laptop battery have without opening the battery physically.
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran 9 месяцев назад
@@MAnees-jk5yg well its possible. One of the register value is chip model. I will check and reply you. Actually am not that good at this. But i will try. Can you share the battery model number and company?
@MAnees-jk5yg
@MAnees-jk5yg 9 месяцев назад
@@AnandakrishnaSudhakaran Bro its HP Elitebook 840 G1 laptop battery having model number CM03XL. I don't know which chip insides the battery. how to know the chip. I want to order CP2112 I2C module to reset this battery.
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran 9 месяцев назад
@@MAnees-jk5yg without knowing the chip its impossible to do. And if its is modern chip, it will be difficult to unseal and reset. Because of the keys. Resetting battery will not work longer. If you want more time, change batteries. That is what actually reset means
@Mobile.Repair.Technician786
@Mobile.Repair.Technician786 10 месяцев назад
Bhai hindi kujh poch skta hn?
@mabuchild
@mabuchild 6 месяцев назад
According to this method, the (Full Charge Capacity) battery value has been modified, but the remaining capacity battery capacity cannot be recognized. It is still 0,
@AnandakrishnaSudhakaran
@AnandakrishnaSudhakaran 6 месяцев назад
You need to calibrate the battery
@davidbolha
@davidbolha 4 месяца назад
@@AnandakrishnaSudhakaran How do you do that ? 🤔
Далее
ФОКУС -СВЕТОФОР
00:32
Просмотров 262 тыс.
RISC-V isn't killing Arm (yet)
9:05
Просмотров 350 тыс.
Hacker's Guide to UART Root Shells
17:40
Просмотров 480 тыс.
ФОКУС -СВЕТОФОР
00:32
Просмотров 262 тыс.